Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
AI Security Natural AI voices make explicit disclosure essential. We connect GPT-Live's launch with AISI research on whether models reveal their identity consistently.
AI Security NIST explains why finite rule sets cannot guarantee universal protection against adaptive prompts and how to build continuously tested, layered AI controls.
Human Security OpenAI's local model detects and masks PII, but it does not guarantee anonymisation or GDPR compliance. Build a safer pipeline for European data.
Threats and Incidents Operation Endgame targeted 326 servers and 142 domains linked to SocGholish, Amadey and StealC. What the action achieved and defenders should do.
Supply Chain Security AI found hundreds of potential flaws across major open-source projects, but triage, reproduction, safe patches and maintainer review remain essential.
Human Security FBI and CISA warn that Russian-linked actors are phishing Signal backup recovery keys. Learn how the attack works and how to respond safely.
Cybersecurity History In 2016, AlphaGo played a move that experts thought was a mistake — but it turned out to be brilliant. Why this moment in the party explains the opportunities and risks of AI in cybersecurity.
Penetration Testing and AppSec Content Security Policy limits XSS impact. Learn Report-Only rollout, nonces, strict-dynamic, reporting and how to enforce a production CSP safely.
Penetration Testing and AppSec RFC 9700 updates OAuth 2.0 security. Learn PKCE, exact redirect URIs, token rotation, audience validation and a practical implementation checklist.
AI Security Prompt injection is the most important vulnerability of the LLM era - because the model does not distinguish instructions from data. Direct and indirect variants, real attack chains and multi-layer defense.
Identity and Access Protect passwords, tokens and API keys with workload identity, Vault, KMS, short TTLs, rotation, audit trails and a tested leak-response process.
Vulnerabilities and CVEs CVE-2026-48282 in Adobe ColdFusion (CVSS 10.0) was exploited within hours of a public write-up. See the patched versions and how to reduce RDS risk.
AI Security A model is only as reliable as the data it learns from and consumes. Poisoning training sets, fine-tuning and RAG indexes - how it works and how to defend AI integrity.
Threats and Incidents Run a tabletop exercise that exposes response gaps without disrupting production. Design scenarios, injects, decisions and corrective actions.
Threats and Incidents Compare SIEM, XDR and EDR across telemetry, detection, retention, response and cost, then design an architecture without duplicate alerts and data.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
